Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/zykPnjolFt2OKhMEu2SeOAG0N3k.roa
File: zykPnjolFt2OKhMEu2SeOAG0N3k.roa (raw, json)
Hash identifier: vMmczSDv2P7kmvRApRVGBrOXghKNhAgyXktPnIT3lVM=
Subject key identifier: CF:29:0F:9E:3A:25:16:DD:8E:2A:13:04:BB:64:9E:38:01:B4:37:79
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019F2269C05C6379CC366614AD9C2371F937
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/zykPnjolFt2OKhMEu2SeOAG0N3k.roa
Signing time: Thu 02 Jul 2026 10:39:43 +0000
ROA not before: Thu 02 Jul 2026 10:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 77.91.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:69:c0:5c:63:79:cc:36:66:14:ad:9c:23:71:f9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Jul 2 10:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf290f9e3a2516dd8e2a1304bb649e3801b43779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:c5:d3:15:4c:0b:3f:c1:e5:73:e4:8a:1d:
e7:70:11:64:af:12:61:fa:51:f4:70:58:b1:87:26:
d7:b9:a2:c2:81:e5:ce:65:7b:cc:0d:b6:ef:5e:04:
ac:c0:70:60:c4:30:b9:2a:fe:1b:cb:d6:af:e9:cc:
45:42:4c:47:9b:12:31:fa:e2:2e:4d:56:2c:87:51:
06:2f:76:b0:1f:fd:71:e9:60:d0:1e:8e:45:d9:be:
23:8c:88:a9:87:f0:64:91:04:10:fb:a4:39:60:37:
95:d7:dd:f0:c2:27:b4:1d:72:17:62:ac:d7:cd:90:
3e:8f:c9:63:61:04:96:71:ae:de:43:ec:c0:28:84:
b6:26:c2:a1:f5:03:4c:ca:5c:6e:7d:f4:1b:93:76:
f9:1e:22:f9:82:ae:18:9a:01:7f:fc:06:27:db:b8:
d1:08:30:f0:7f:26:f4:0b:09:c3:79:98:d1:34:b5:
16:f1:07:27:3d:bd:51:3e:e0:dd:b4:31:ee:0e:5d:
5a:97:86:a2:4c:b6:d5:03:fe:1a:f1:36:f2:3b:fe:
d9:ab:6f:4f:1d:8f:04:38:6d:a0:e0:6a:ac:e0:80:
5c:b9:2c:89:84:9f:52:ea:7c:64:77:5b:17:32:1c:
2f:8c:89:65:86:01:c0:5f:9c:ab:8b:c8:51:cb:b0:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:0F:9E:3A:25:16:DD:8E:2A:13:04:BB:64:9E:38:01:B4:37:79
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/zykPnjolFt2OKhMEu2SeOAG0N3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:33:02:96:04:b8:c8:05:f2:3f:24:5a:15:69:88:d0:82:bf:
7d:8b:22:ea:ae:ff:04:76:a2:74:f1:23:b7:df:f3:54:1b:e7:
4b:30:c2:8a:29:64:86:86:bd:11:3e:d6:20:8a:d0:7c:ae:4d:
ee:3e:8d:8d:17:d9:fc:5e:f9:77:13:76:06:0c:fc:a4:12:05:
a6:3f:00:37:bb:58:e4:ea:3c:96:96:f4:8f:f7:ca:1f:b4:0c:
5a:05:2a:8a:15:1f:fc:bf:d5:5f:4c:e8:e4:81:bb:7f:07:28:
0a:f5:eb:43:fc:92:7d:0f:25:f5:b6:73:78:af:41:39:3e:b3:
1d:bf:7c:b1:40:5b:6b:60:95:65:30:36:57:42:87:55:c9:b0:
8f:89:f6:3e:19:9f:d1:9f:9b:5a:6b:75:a9:af:f4:db:0b:55:
58:1c:dc:22:f0:c1:42:16:ef:5a:33:31:97:f0:b7:e0:7b:ca:
11:40:7c:f5:67:a0:16:b1:71:5d:a5:da:24:4a:66:a0:46:45:
4d:4f:6e:17:63:f1:66:e0:23:6f:de:de:1d:cf:d8:ca:e5:b5:
ad:95:db:46:cb:ec:f6:ba:2e:a4:b2:d0:b4:d6:21:92:6b:33:
0c:7d:6e:e8:f6:0c:c3:61:e9:ca:3d:0a:22:c1:33:90:a8:58:
a8:18:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:38 2026 by rpki-client